This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913631F/AFC3E90471EF11F0854F8F37C4F9AE02/5GvPnnC07M_8EZ4dbb9SiW-42Yw.mft File: 5GvPnnC07M_8EZ4dbb9SiW-42Yw.mft (raw, json) Hash identifier: tzIdaOszp0jhUmLgP+QL+KGZb6U4XmgWkL5OlcJQPRQ= Subject key identifier: DA:A3:CA:9B:61:B7:49:B4:18:EA:DB:2A:35:9A:3C:CA:6D:48:D0:4C Authority key identifier: E4:6B:CF:9E:70:B4:EC:CF:FC:11:9E:1D:6D:BF:52:89:6F:B8:D9:8C Certificate issuer: /CN=A913631F/serialNumber=E46BCF9E70B4ECCFFC119E1D6DBF52896FB8D98C Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GvPnnC07M_8EZ4dbb9SiW-42Yw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913631F/AFC3E90471EF11F0854F8F37C4F9AE02/5GvPnnC07M_8EZ4dbb9SiW-42Yw.mft Manifest number: 3F Signing time: Fri 05 Dec 2025 04:10:54 +0000 Manifest this update: Fri 05 Dec 2025 04:10:54 +0000 Manifest next update: Fri 12 Dec 2025 04:10:54 +0000 Files and hashes: 1: 5GvPnnC07M_8EZ4dbb9SiW-42Yw.crl (hash: 31xdr7g6zStsCaDtvSvXl40APCQHhPwcDtwxP7gl5GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913631F/AFC3E90471EF11F0854F8F37C4F9AE02/5GvPnnC07M_8EZ4dbb9SiW-42Yw.crl rsync://rpki.apnic.net/member_repository/A913631F/AFC3E90471EF11F0854F8F37C4F9AE02/5GvPnnC07M_8EZ4dbb9SiW-42Yw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GvPnnC07M_8EZ4dbb9SiW-42Yw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913631F, serialNumber=E46BCF9E70B4ECCFFC119E1D6DBF52896FB8D98C Validity Not Before: Dec 5 04:10:54 2025 GMT Not After : Dec 12 04:10:54 2025 GMT Subject: CN=69325b4e-8076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cb:e1:e5:0a:14:3a:55:b9:e6:75:d1:9d:a5: 4d:0a:92:4e:05:f1:e1:c4:38:a3:83:e3:5b:86:6c: e9:ed:4c:29:e1:83:74:bf:5c:9a:20:e9:42:67:b1: 46:25:45:b8:7f:8e:f0:5d:01:b5:9d:98:a9:a7:4a: 3a:7e:ab:bb:88:5d:5c:aa:28:fe:45:74:5b:37:4b: a7:aa:c3:80:b6:8e:7f:68:f3:c0:f0:e4:e0:13:34: b2:be:1f:df:ae:df:d1:13:c0:c3:37:ea:c2:d5:a5: 4c:87:bd:6b:ef:94:24:f7:f8:91:7f:d0:7c:ca:24: 80:4b:91:71:c7:f4:64:55:78:c4:4d:e0:f3:62:32: a9:ac:a5:08:df:5a:3a:c3:7a:72:f3:f5:70:ac:33: 53:da:a2:ec:5f:d6:81:4e:c8:e9:68:56:79:cc:a1: 01:5c:30:90:31:fa:b4:1f:5b:d8:c2:58:f7:06:3e: da:28:c5:e5:db:b2:f8:54:16:20:c6:44:d7:0d:90: ae:80:14:41:cf:f4:19:3b:0a:28:1f:63:f1:85:a0: de:b3:54:fc:73:76:43:15:cf:ad:3c:03:67:54:73: 5d:e2:56:75:65:a6:0f:14:55:03:28:de:90:47:4e: 4e:f3:7d:f0:73:3c:cb:f1:52:22:6e:e7:79:17:42: c4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A3:CA:9B:61:B7:49:B4:18:EA:DB:2A:35:9A:3C:CA:6D:48:D0:4C X509v3 Authority Key Identifier: keyid:E4:6B:CF:9E:70:B4:EC:CF:FC:11:9E:1D:6D:BF:52:89:6F:B8:D9:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913631F/AFC3E90471EF11F0854F8F37C4F9AE02/5GvPnnC07M_8EZ4dbb9SiW-42Yw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GvPnnC07M_8EZ4dbb9SiW-42Yw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913631F/AFC3E90471EF11F0854F8F37C4F9AE02/5GvPnnC07M_8EZ4dbb9SiW-42Yw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:b1:de:4f:9a:94:15:e3:6f:bf:33:e2:44:59:a3:6b:50:98: 55:09:2a:c1:56:5a:15:72:10:af:7d:2a:a7:6e:0f:e8:f3:d5: e2:37:11:12:8c:71:5b:af:e2:98:f2:a7:19:22:c3:b8:0c:e0: 5c:e2:ff:39:03:a5:3c:cc:aa:90:a2:5e:6c:b6:32:3c:31:dd: 65:b0:8e:78:f1:a3:2f:b7:49:69:02:bc:16:c0:61:24:13:06: 7c:48:25:66:5e:e5:a5:d1:4e:94:55:87:6f:da:ae:7c:89:14: 1f:9c:10:5f:9b:0d:24:aa:6d:36:02:d8:ee:a9:75:69:19:75: e4:2d:eb:e2:bd:bc:f9:20:d7:91:fd:75:c2:82:0e:6a:b9:10: 2d:2c:51:88:1c:8a:21:8b:6b:9e:18:8c:b9:16:6c:10:3f:7e: 13:10:3f:2b:67:ce:59:ae:f9:d8:2e:9a:7f:55:dc:a3:ec:47: 5e:ed:1d:01:6c:94:fd:27:80:dd:88:a5:a5:59:84:ec:06:6a: a1:ba:1b:81:75:72:c9:90:ec:0b:e8:fe:89:f6:b8:46:3e:29: 9d:b0:d2:e2:61:2f:d7:eb:2b:6f:18:7e:fc:91:43:29:e9:51: 28:46:cc:8d:8b:53:72:b4:65:02:9c:ff:1b:45:62:23:63:14: de:53:fe:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjMxRjExMC8GA1UEBRMoRTQ2QkNGOUU3MEI0RUNDRkZDMTE5RTFENkRCRjUyODk2 RkI4RDk4QzAeFw0yNTEyMDUwNDEwNTRaFw0yNTEyMTIwNDEwNTRaMBgxFjAUBgNV BAMTDTY5MzI1YjRlLTgwNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAy+HlChQ6VbnmddGdpU0Kkk4F8eHEOKOD41uGbOntTCnhg3S/XJog6UJnsUYl Rbh/jvBdAbWdmKmnSjp+q7uIXVyqKP5FdFs3S6eqw4C2jn9o88Dw5OATNLK+H9+u 39ETwMM36sLVpUyHvWvvlCT3+JF/0HzKJIBLkXHH9GRVeMRN4PNiMqmspQjfWjrD enLz9XCsM1Paouxf1oFOyOloVnnMoQFcMJAx+rQfW9jCWPcGPtooxeXbsvhUFiDG RNcNkK6AFEHP9Bk7CigfY/GFoN6zVPxzdkMVz608A2dUc13iVnVlpg8UVQMo3pBH Tk7zffBzPMvxUiJu53kXQsTXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2qPKm2G3 SbQY6tsqNZo8ym1I0EwwHwYDVR0jBBgwFoAU5GvPnnC07M/8EZ4dbb9SiW+42Yww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MzFGL0FGQzNFOTA0NzFF RjExRjA4NTRGOEYzN0M0RjlBRTAyLzVHdlBubkMwN01fOEVaNGRiYjlTaVctNDJZ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUd2UG5uQzA3TV84RVo0ZGJiOVNpVy00Mll3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MzFGL0FGQzNFOTA0NzFFRjExRjA4NTRGOEYzN0M0RjlBRTAyLzVHdlBubkMwN01f OEVaNGRiYjlTaVctNDJZdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHCx3k+alBXjb78z4kRZo2tQmFUJKsFWWhVyEK99KqduD+jz1eI3ERKM cVuv4pjypxkiw7gM4Fzi/zkDpTzMqpCiXmy2Mjwx3WWwjnjxoy+3SWkCvBbAYSQT BnxIJWZe5aXRTpRVh2/arnyJFB+cEF+bDSSqbTYC2O6pdWkZdeQt6+K9vPkg15H9 dcKCDmq5EC0sUYgciiGLa54YjLkWbBA/fhMQPytnzlmu+dgumn9V3KPsR17tHQFs lP0ngN2IpaVZhOwGaqG6G4F1csmQ7Avo/on2uEY+KZ2w0uJhL9frK28YfvyRQynp UShGzI2LU3K0ZQKc/xtFYiNjFN5T/qU= -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:16 2025 by rpki-client